GitHub - wcoreiron/AzureSentinel-: Analytic Rules

Name		Name	Last commit message	Last commit date
Latest commit History 16 Commits
APT Actors Exploiting Static Machine Keys in Public-Facing Web Application		APT Actors Exploiting Static Machine Keys in Public-Facing Web Application
Accounts Terminated Antimalware		Accounts Terminated Antimalware
CVE-2021-44228 - Apache Log4j Remote Code Execution Vulnerability		CVE-2021-44228 - Apache Log4j Remote Code Execution Vulnerability
Clearing of forensic evidence from event logs using wevtutil		Clearing of forensic evidence from event logs using wevtutil
Computers With Cleaned Event Logs		Computers With Cleaned Event Logs
Crash dump disabled on host		Crash dump disabled on host
Emotet Related IP addresses		Emotet Related IP addresses
Exploitation attempt against SpringShell (CVE-2022-22965)		Exploitation attempt against SpringShell (CVE-2022-22965)
Log4j vulnerability exploit aka Log4Shell IP IOC		Log4j vulnerability exploit aka Log4Shell IP IOC
Malware related to Daxin activity		Malware related to Daxin activity
Multiple signs of ransomware activity		Multiple signs of ransomware activity
Possible Ransomware Related Destruction Activity		Possible Ransomware Related Destruction Activity
Suspected exploitation of Log4j vulnerability		Suspected exploitation of Log4j vulnerability
Unauthorized (rejected) connection attempts		Unauthorized (rejected) connection attempts
Unauthorized Users		Unauthorized Users

About

Analytic Rules

Report repository

Releases

No releases published

Packages

No packages published